azure-storage-azcopy vulnerabilities (SUSE)
10 vulnerabilities.
azure-storage-azcopySUSEgRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers8.7 Highazure-storage-azcopySUSEgRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation8.7 Highazure-storage-azcopySUSEgRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion6.3 Mediumazure-storage-azcopySUSEInfinite loop on invalid input in golang.org/x/text7.5 Highazure-storage-azcopySUSEOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumazure-storage-azcopySUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highazure-storage-azcopySUSEGo JOSE affect by a panic in JWE decryption7.5 Highazure-storage-azcopySUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 Criticalazure-storage-azcopySUSEIncorrect results returned from Rows.Scan in database/sql7.0 Highazure-storage-azcopySUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical